Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d401cf92-6d56-4309-80f7-397ad3dbd150.roa
File:                     d401cf92-6d56-4309-80f7-397ad3dbd150.roa (raw, json)
Hash identifier:          uwk8PL2w0/Oc/r5fNZpIJSY9UEuM0QgVoELGuXii/eI=
Subject key identifier:   7C:B7:75:E9:58:BD:AB:39:DD:DB:FF:B6:A1:44:57:2D:39:1A:2E:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5646DFE67843BBB00841CD36C2CF48C765935F3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d401cf92-6d56-4309-80f7-397ad3dbd150.roa
Signing time:             Fri 24 Jul 2026 01:00:08 +0000
ROA not before:           Fri 24 Jul 2026 01:00:08 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        110.238.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:46:df:e6:78:43:bb:b0:08:41:cd:36:c2:cf:48:c7:65:93:5f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 01:00:08 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=21ff0bbac2919824aee3d29660bd389da8202e443f23b0940b09fecf1bb1354c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:14:bc:cc:71:95:9f:34:35:34:c2:28:36:3c:
                    41:b0:cb:95:5d:b4:44:0c:3c:22:3b:f4:b2:2b:1c:
                    41:15:6c:c6:42:0c:0b:8e:b5:d0:f1:d6:a6:bc:33:
                    a2:1f:fb:25:e9:81:26:ce:6e:66:c2:ea:d7:ed:7d:
                    41:f4:f4:28:52:8e:68:3b:aa:cd:7b:9d:0f:05:b4:
                    6a:fb:7b:bf:de:7d:7f:81:36:08:4e:b2:2d:1c:5d:
                    31:9c:18:5a:76:01:29:90:9d:34:7d:f5:f0:8d:3b:
                    12:e0:b0:ba:c2:5c:be:4f:ea:12:8e:39:18:a9:04:
                    e2:5d:f7:9d:2c:49:cd:37:23:7e:c4:d9:99:d5:56:
                    7d:23:e3:be:9f:0b:11:4f:34:ff:c6:57:b2:6d:36:
                    b3:8e:8c:79:31:27:e9:80:12:d1:03:c6:b5:20:8a:
                    26:24:11:1f:71:02:8d:38:79:db:9d:eb:c5:f7:a3:
                    ab:13:15:09:f6:f7:c4:c8:bc:64:87:1c:aa:86:95:
                    3b:cd:1b:49:54:1c:7b:46:6e:74:cb:91:35:e4:a9:
                    51:f1:af:6e:10:05:6f:cf:e1:cf:87:4e:92:c6:e9:
                    cf:7b:ce:cf:bb:4a:ce:55:2b:a3:a8:2e:f6:df:91:
                    54:10:52:54:28:3c:56:07:c8:88:e3:b4:90:71:09:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B7:75:E9:58:BD:AB:39:DD:DB:FF:B6:A1:44:57:2D:39:1A:2E:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d401cf92-6d56-4309-80f7-397ad3dbd150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.238.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:d6:fc:4c:62:96:c0:6c:5b:0f:e3:92:fd:b3:89:00:d4:d9:
         6f:02:81:5e:c6:a2:c2:49:30:b9:0f:b4:0e:2e:44:a7:93:cb:
         ca:2b:e1:53:a7:28:66:ec:67:6b:07:05:4d:ca:17:4c:22:84:
         23:ba:91:f7:be:ab:df:42:46:d1:f9:8f:b9:91:70:f7:38:67:
         3f:b0:f6:79:d2:13:9e:5e:50:78:5e:8d:33:dc:21:9a:66:e1:
         32:12:5b:43:bf:f6:11:90:31:e5:1c:d2:97:dc:85:f1:a0:16:
         95:df:f2:3a:ca:fc:b3:3b:d7:9b:80:3b:4a:54:9f:9c:37:4b:
         ab:4c:e7:45:a7:c4:c9:d6:04:83:2b:22:1a:4b:1e:80:eb:56:
         e0:81:a8:20:88:f8:5d:97:85:7c:4d:46:2e:a9:60:2d:73:0e:
         ed:04:ee:f3:1a:72:bd:87:7b:9d:1e:af:72:12:02:58:f3:4b:
         83:60:c4:b6:65:58:30:bd:15:bf:28:4e:7e:ff:fa:60:48:70:
         af:85:f8:47:11:ab:6d:4d:bf:05:97:0c:d3:ea:24:06:48:83:
         56:a0:17:b4:3d:55:74:8f:0c:19:2f:f3:4d:5e:a5:07:e1:32:
         88:64:c0:f6:35:fb:b8:fd:54:da:5f:3c:c8:84:d9:d0:20:5d:
         55:6f:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:04 2026 by rpki-client